Microsoft can't even figure out how to send email reliably. But sure everyone should trust them with signing packages.